Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/4b30ad89-116c-3528-9808-423be92dcb42.roa
File:                     4b30ad89-116c-3528-9808-423be92dcb42.roa (raw, json)
Hash identifier:          Qo1/wQXfZZkXN2MJcCh7qc6RUWu45DKZUNpATcRYdoM=
Subject key identifier:   12:68:97:B5:29:1F:2D:BE:7A:D6:B1:DC:39:AB:A4:EA:CD:6C:6A:FD
Certificate issuer:       /CN=d1323e63-bc87-48fa-aebd-d6c6f1b01ef5
Certificate serial:       010D0C9F4328584D40CA5C2BA7A2502264609100
Authority key identifier: 80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/4b30ad89-116c-3528-9808-423be92dcb42.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        199.175.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:5c:2b:a7:a2:50:22:64:60:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1323e63-bc87-48fa-aebd-d6c6f1b01ef5
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=fbf1032a-12dc-43e7-8030-858785a9e838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:7b:9f:9e:b4:86:d3:59:7f:79:0a:74:7c:
                    20:bc:26:e6:b5:b0:5e:09:47:ff:92:c3:10:9d:da:
                    f8:2b:fc:06:58:dc:9c:8f:b9:40:4c:36:e8:13:2d:
                    8b:56:0c:c5:49:b6:6b:11:95:8e:1b:15:99:e8:58:
                    d8:3e:3f:c8:c1:e0:d7:67:9d:06:14:24:df:4d:72:
                    1f:a7:6c:01:8e:6a:63:2f:e5:22:9e:01:c6:4b:0c:
                    f1:dc:a5:27:62:94:e6:b7:00:d8:32:e2:5a:e1:be:
                    68:da:75:b6:35:59:de:0e:ba:ad:6f:86:6e:01:65:
                    99:41:c1:4e:82:d7:5a:92:7b:37:a3:ab:17:6f:f2:
                    7b:9d:e0:dd:f5:2b:9d:02:fa:c4:22:0b:fc:d9:69:
                    5a:e7:94:bc:3f:68:fa:e7:50:da:f0:2e:03:d5:b8:
                    02:f9:6d:e5:ed:42:b1:86:b6:d0:65:c7:da:ac:d2:
                    df:0f:90:84:43:50:8c:11:a3:1d:a2:14:bb:9b:61:
                    94:20:65:5e:c6:58:f5:93:c3:b4:f2:ef:23:d6:94:
                    01:bb:89:3d:e0:97:fc:61:ab:d7:7d:38:6b:7e:b4:
                    29:39:89:8f:60:70:19:86:54:f9:f4:ed:2b:5c:c1:
                    f4:67:ba:14:16:36:62:0c:5e:2b:98:3d:44:06:e2:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:97:B5:29:1F:2D:BE:7A:D6:B1:DC:39:AB:A4:EA:CD:6C:6A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/4b30ad89-116c-3528-9808-423be92dcb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.crl

            X509v3 Authority Key Identifier:
                keyid:80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:72:dd:23:84:73:2e:ba:82:5d:72:75:53:b3:da:01:cc:
         aa:7e:26:54:1a:e2:ef:92:a9:bf:61:28:01:25:d0:66:4c:ed:
         d5:37:08:e7:f6:5b:fa:b3:a9:3d:64:3b:ad:61:78:f2:d7:fd:
         5a:68:2c:23:0f:e9:4e:0e:06:ca:b5:96:dd:22:0a:43:85:33:
         aa:88:60:32:32:f6:d2:83:54:38:2f:1e:38:7c:4c:b7:ce:a8:
         df:62:65:48:2a:2f:c5:58:5d:08:39:c3:46:5b:4e:c8:6a:dc:
         6a:e9:84:c9:d1:22:ba:45:ad:47:07:a7:70:9d:cf:32:c3:a6:
         ca:a8:fc:e6:ee:2b:73:62:d8:cb:12:ae:7f:16:8b:71:af:fb:
         d9:23:39:0b:90:be:29:f2:b9:31:5a:3a:19:39:84:9a:8b:b9:
         72:f9:38:31:f8:b9:15:30:7d:f7:ee:b2:6c:75:10:a8:dc:3d:
         1a:93:bd:35:0b:6a:04:1e:ec:aa:ec:3c:f7:65:56:ca:b0:02:
         84:ff:68:ea:72:05:0a:c7:9a:09:c1:3d:81:34:65:ba:73:d3:
         e3:52:92:76:6f:3a:06:6b:af:17:a4:6e:2d:85:ac:fd:96:4e:
         ae:8a:b4:72:b8:52:71:41:bc:36:16:b0:52:bd:c3:3c:a3:60:
         e9:aa:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:52 2026 by rpki-client